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ABSTRACT 

We propose a scheme for quantum key distribution (QKD) protocol with dual-rail displaced 
photon states. Displaced single photon states carry bit value of code which may be extracted 
while coherent states carry nothing and they only provide inconclusive outcome. Developed 
QKD protocol works with experimental attendant noise to observe presence of malicious Eve. 
Pulses with large amplitudes unlike conventional QKD relying on faint laser pulses are used 
that may approximate it to standard telecommunication communication and may show 
resistance to eavesdropping even in settings with high attenuation. Information leakage to the 
eavesdropper is determined from comparison of output distribution of the outcomes with ideal 
one that is defined by two additional inaccessible to nobody, saving for who sends the pulses, 
parameters. Robustness to some possible eavesdropping attacks is shown. 
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1. Introduction 

The quantum key distribution protocol provides a way for two remote parties (traditionally 
known as Alice and Bob) to share a secure random key by communicating over an open 
channel [1-5]. The two users have two kinds of communication channels at their disposal. 
One is a classical public channel that may be eavesdropped by any unauthorized person but 
cannot be modified and the second is a quantum channel. The quantum channel is used to 
transmit the secret key while the classical public channel is used to check possible presence of 
eavesdropping and to send the encoded message. Quantum mechanics ensures that any 
activities of potential eavesdroppers can be detected. If Alice and Bob are sure in security of 
their key, they finally process the obtained key (the raw key) to produce a much safer key (the 
final key) using classical methods of error correction and privacy amplification [6,7]. 

At present, there is a large collection of variations of QKD protocols [8]. Let us mention a 
few, chosen somewhat arbitrarily. The most famous QKD protocol is the four state scheme, 
usually referred to as the Bennet-Brassard 1984 (BB84) protocol. In this protocol, the 
transmission of a single photon randomly polarized along four directions is used [2]. The key 
idea of the BB84 protocol is that simultaneous measurements of noncommuting observables 
for a single photon in two conjugate bases are forbidden by quantum mechanics. In order 
words, the measurement of one observable made on the eigenstate of another observable 
inevitably introduces disturbance to the state. Eve has no any knowledge about the state sent 
by Alice and therefore she is forced on average half the time to introduce a disturbance into 
the state that can be detected as a bit error. One of possible variation of BB84 consists in 
using quantum systems of dimension greater than 2 [9]. Most of the existing schemes use an 
imperfect single-photon source since a single photon resource is difficult to produce 
experimentally, usually weak pulses were used in practice [10]. Such an implementation, in 
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general case, may subject to the photon number-splitting attack [1 1]. To deal with imperfect 
source of single photons, many interesting methods was proposed [12] involving the decoy- 
state method [13]. 

Another possible way to implement secret sharing coding is based on use of pairs of 
Einstein-Podolsky-Rosen (EPR) correlated photons [3]. A communication protocol based on 
entangled pairs of qubits is presented in [14]. A system, which is conceptually the simplest, is 
the use of nonorthogonal quantum states [5]. Indeed, two nonorthogonal states cannot be 
distinguished unambiguously without perturbation only at the cost of some losses [15]. 
Initially, the two state protocol [5] was proposed to implement using interference of two 
classical pulses that is fragile under influence of decoherence. 

Instead of use of single photons or weak coherent pulses, it is interesting idea any 
nonclassical field states are useful for quantum information processing and communication 
that was demonstrated on example of QKD with squeezed light [16]. Here, we propose to 
make use of nonclassical properties of the displaced single photon states to share secret 
coding between two sides. Displacement operator imposes additional varied degree of 
freedom on a photon state. According to studied model of QKD the inputs are the dual-rail 
displaced states rather than single photon |l^ unlike [2]. In order words, carriers in the model 

are the optical pulses with different large amplitudes as in usual classical communication. The 
developed protocol of QKD is free of problems connected with interference. Let us also 
mention the displaced single photon state was experimentally generated in [17]. A possibility 
to conditionally generate displaced entangled states via nonlinear interaction of powerful 
pump beam with a crystal with x''^^ nonlinearity was proposed in [18]. Another interesting 
application of the displaced states is the protocol of dense coding [19]. 

2. Implementation of QKD with dual-rail displaced states 
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In developed protocol, Alice prepares two ensembles of displaced states with different 
amplitudes of displacement (in general case, we deal with four states two of which are 
nonclassical). Every of the ensembles consists of only basis states, namely either product of 
displaced single photon and vacuum states or product of two displaced vacuum states (a two 
qubit system has four computational basis states denoted | OO) , 1 1 0) , 1 1) , and 1 1 1) ) but not 

their superpositions in the two-dimensional space. Basis elements |00), |10) with different 

amplitudes of displacement are not orthogonal to each other. Performance of the protocol is 
based on use of nonclassical properties of the displaced single photon states. On the receiving 
side. Bob has to distinguish between two displaced single photons |10) with different 

amplitudes for each incoming carrier. Since displaced single photon states are non- 
orthogonal. Bob cannot do it with certainty and he sometimes fails to extract correct outcome 
but once it gives one (this means that he performs a test by means of a generalized 
measurement known POVM [20]). Proposed protocol corresponds a communication channel 
known as a binary erasure channel with possible outcomes 0,1, and ? (? means 
inconclusive result) as in B-92 protocol [5]. For example, if Alice sends a , Bob may get 
either a or an inconclusive result, but never 1, saving for a case of Eve eavesdropping the 
communication channel sends herself 1 by mistake. Inconclusive outcomes are also provided 
by sending of I OO) or the same coherent states with different amplitudes. 



Now, let us present mathematical details of the protocol. The states 1 0, a) = D{a^O) and 

A A 

1 1, a) = D{aJ l) are the displaced vacuum and one-photon states, respectively, where D{a) is 

the displacement operator [18, 19]. A quantum system prepared by Alice is given by density 
matrix 
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P=2A + 2A, (la) 
where 

Pi=PiWi){<Pi\ + H\(Px){<Pi\^ (lb) 

P2=P2\<Pl){<P2\ + P'2\<P2){<P2\, (IC) 

( Pj + = 1 and + ^2 = 1 ) with dual-rail displaced states defined as 

=|0'«)l|0'''«>2' (2t>) 

k2>i2=|l''A)i|0'«l)2' (2C) 

1^2)^^ =|0,/a)j0,a)2, (2d) 



where in general case a^a^. The parameters a , oTj and Pj , Pj , P2 , and Pj , respectively, are 
Alice's secret ones and they are hidden from both Bob and Eve. The states \(Pi)^^ and \(P2)^2 
may carry bit values of the coding (0 or 1 , respectively). We are going to call the states as bit 
ones. Since the states \(P])^^ and [^2)^2 carry any information to Bob, we call them 

disguised ones. 

Bob prepares its measurement system as it is shown in Fig. 1 to extract some useful 
information fi-om the states obtained fi-om Alice. The measurement system involves a 

balanced beam splitter B\ described by the following matrix 
1 [1 ^1 



The outcome of the beam splitter (3) is the following 




B\cp,)^^=\Q)^Q,i42a)^, (4b) 
^1^2)12 = -!=|l,^V2a) |0)^ +/ 0,/V2a) |l)J, (4c) 



4i 

B\<p\=Q,i42a)\Q). (4d) 
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To achieve a discrimination of the outcomes (4a)-(4d) with off-the-shelf photon counters that 
can only differentiate between zero and more photons (1,2,...^ ), the simplest approach for 
Bob is to split them by two beam splitters as shown in Fig. 1 . Consider a partial case of such a 
discrimination of a single photon and coherent state as it is shown in Fig. 2 (a, b). The beam 

splitter transforms a coherent state 0, i-yjla) to the product of two coherent states 



0, i-j2aj 1 ^ 1 0, a) J 0, icc)^, while a single photon to a superposition state 

|l0)j2 ~^(V"^)(il^)i2 1^^)12)- If both detectors Dj and register any photons, we know 
we detected a state \Q,i^a) . On the contrary, if either or does not click, we can 



assume with almost unity probability that was a single photon, especially in the case of large 
value of a . The same is applicable to discrimination of all states in Eqs. (4a)-(4d). It follows 
from Eqs. (4a)-(4d) that three simultaneous clicks by detectors -D^ in Fig. 1 are 
unambiguously identified as bit values ( and 1 , respectively). All other events with three 
clicks less or more are identified as inconclusive outcome. 

Given QKD protocol works as follows. Alice injects light in one of the four states (4a)- 
(4d) into a communication channel in random sequence. Via the use of a proposed detection 
system (Fig. 1) triggered on some photon statistics, presence of three simultaneous clicks in 
output Bob's statistics heralds the extraction of bit information. All the carries sent by Alice 
are numbered. Bob measures the incoming pulses to establish a one-to-one correspondence 
between sent and received pulses. At the point, where Bob may successfully extract bit value 



(three simultaneous clicks), they get perfectly correlated results. Bob has only to declare a 
number of the corresponding pulse (but not its result). All the rest inconclusive outcomes are 
discarded by Bob. This allows for Alice and Bob to share mutual information 
l(A,B) = log,{P,p,+P,p,)-{P,p, hg,{P,p,)+P,p, log,{P,p,))/(PiPi ^PiPil (5) 
where Pi= P2= 0.5(l - Pq{oc)) are the conditional probabilities for Bob to obtain a bit result 
provided that Alice sent \(Pi)^^ and 1^2)12' ^^^P^'^^^^^^y' 

i^(a) = exp(-2|ap j+2exp[-|ci;|^ j[l-exp(-|cir|^]], where Po{oc) is the probability to register 
three clicks less provided that the states were |l)Jo,/V2cir\ , OJ^fla) \\)^ . To simplify 



calculations in future consideration, we suppose a-a^. Although, one should note the QKD 
protocol admits a possibility a^a^ and even more Alice may vary amplitudes of every sent 
carriers provided that the phase relations of dual states remain constant. Given possibility may 
prevent the protocol from Eve's eavesdropping in the case of possible more skilful attacks 
that beyond our consideration. It is natural to assume that Alice delivers states | ^j)^^ and 



1^2/12 equal probabilities P^=Pj^=P that allows for Alice and Bob to share 1 bit of 

mutual information. 

As well known, quantum cryptography cannot prevent eavesdropping, but any 
eavesdropping attempt can be detected by the legitimate users of the communication channel. 
This is related with that fact that eavesdropping affects the quantum state of the information 
carriers and results in an abnormal error rate. Therefore, before Bob publicly declares the 
number (but not the result of his measurement) where he successfully extracted a bit value, 
Alice and Bob have to test their communication channel by sacrificing a part of their data 
sufficient to estimate ou^ut distributions. Actually, there are three parameters to judge about 
possible presence of eavesdropping in the subset. The main such a parameter is the output 
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distribution of bit and inconclusive outcomes given in the case of absence of eavesdropping 
by 

Pr'=^{l-P,{a)) = ^{l-P,{a)), (6a) 
Pr=^{^-PoM) = ^(l-PM, (6b) 

p(Ou,) ^■^_p(Ou,)_plOut)_ (6c) 

Note that neither Bob nor mahcious Eve cannot know the output distribution of the bit and 
inconclusive outcomes since the parameters P^=P2=P and a are chosen by Alice according 
to her own strategy and they are hidden from other participants. Eve can only listen to the talk 
between Alice and Bob through a public channel but she cannot correct the output distribution 
shared by Alice and Bob. Another important parameter whose change testifies presence of 
Eve in the communication channel is that which we call disguised probability P^ being 

frequency of appearance of bit outcome while Alice sent one of the disguised states. The 
disguised states cannot give bit outcome only inconclusive outcome. The disguised 
probability P^ has to be equal exactly zero in ideal case of absence of eavesdropping. Finally, 
Alice and Bob also may compare bit values of the chosen subset. For example, it is evident 
that single photon is not detected in mode 2 if Alice sends a state | (Pi)^^ and vise versa. Thus, 

these parameters may serve as indicators of presence or absence of the eavesdropping in the 
communication channel. If the parameters do not coincide with ideal then eavesdropping is 
detected and transmission is aborted. One should note it is possible directly to check a 
communication channel not sacrificing any subset of data. Indeed, Bob call corresponding 
number of his bit outcome and is it sufficient for Alice to estimate output distribution and 
disguised probability to compare it with Bob's. After that they can decide to take them or 
discard. 
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Displacing a state of light can be experimentally implemented by overlapping it with a 
strong coherent state 1 0,0^2) upon a highly reflecting beam splitter. Now, we follow a method 

of [17] used to experimentally generate a displaced single photon. We suppose that the initial 
single photon is prepared by means of conditional measurements on a biphoton generated via 
parametric down conversion. It was discussed in [17] that imperfections associated with 
experimental technique result in the photon being prepared with a substantial admixture of the 
vacuum state = /7|l)(l| + {i-rfj 0)(0| , where rj is the preparation efficiency. The 

preparation efficiency may accounts for the spontaneous parametric converter dark count 
events. In such an event, the quantum state in the output mode in not conditioned on that in 
used converter channel. Alice only needs to estimate the value of her preparation efficiency. 
She uses a beam splitter with arbitrary parameters T and R but which knows only she (7" 
and R are transmittance and reflectance, respectively) 

to overlap her prepared state with a strong coherent field |0,a2) • Indeed, 

Alice uses two coherent fields |0,«2)^ |0,«2)2 provide outcome (la). The output state in 

the beam splitter B is calculated by applying beam splitter transformation rules. A state in the 
modes 1 and 2 is obtained if we take trace upon states in auxiliary mode . The beam 
splitter acts upon the incident single photon state simply as a lossy refiector, reducing its 

I |2 

efficiency by a factor \R\ . Also, the beam splitter causes the displacement of the state p^ , 
producing a final statistical mixture of displaced Fock states as 

PA=^\Rf^^^oiiT),fi,a,T\)\0,a[)^^(l,a[\)+ 

/ \. \. The state p^ is the state p^ (Eq. (lb)) 

(;7|r| + 1 - 77 Jj 0, a{r\^{0, a,T \}\ 0, a[ (O, a[ \) 

provided that = ri\R^ , = Tj\Tf +1-tj ^ a ^ a^T and ia = a[ . The same is applicable to 
generate Pi (Eq. (Ic)). Thus, unavoidable noise being in practice due to technical 



B = 



T 
-R* 



R 

r 
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imperfections is substantial part of the developed protocol of key distribution unlike most of 
other protocols which require ideal resource of quantum states, for example, ideal resource of 
single photons. Any of unauthorized observers may estimate preparation efficiency ^ but it is 

hardly possible for him to guess the reducing factor |^|^ and all the more the values of 
parameters a and that initially are known only to Alice. The additional modulation of the 
outcome of conditioned down converter gives a possibility Alice to use quantum states with 
additional secret parameters to transmit them to Bob. 

3. Robustness to eavesdropping 

We now analyze some of eavesdropping strategies. Note that direct measurement of 
incoming pulse does not give answer which of the four states was sent. If Eve prefers to 
measure dependence of falling field on the relative phase she may use a scheme that involves 
homodyning the signal field with a reference signal known as the local oscillator before 
photodetection. Homodyning with a reference signal of fixed phase gives the phase sensitivity 
necessary to yield the quadrature variances. A measurement of quadrature components shows 

that statistical characteristics (O, a | a| 0, a) = (l, a | a| 1, or) = or are equal. Then, Eve may not be 
aware of which type of state she has (bit or disguised) if she measured a definite value of the 

quadrature component ( (O, a | X\ 0, a) = (l, « | X\ 1, a) ). 

The most practical eavesdropping strategy may be intercept-resend attack. Eve intercepts 
the quantum carrier on its way from Alice and Bob and performs the same measurement as it 
does Bob, namely, using a beam splitter 5, (Eq. (3)). After the measurement. Eve sends to 
Bob another quantum carrier in one of the four states (2a)-(2d), looking at her outcome and 
following some chosen strategy. Eve's strategy may be the following. If Eve obtains bit value 



11 

then she again sends the corresponding bit state either \(p-i)^^ or 1^2)12' respectively. If Eve 
detects inconclusive outcome then she is tr5dng to guess possible Alice's signal and to 
masquerade as Alice. Consider it in detail on example of the state . Assume that Eve 

resends a state \(p\. with probability Pj and \(p\) with probability +^2 in the 

\ I 1-2. 1/12 

case of her inconclusive output. Then, Eve affects output probability distribution as 

"'^ = Pj (1 + Pj )/8 + /J /J /4 , where we even neglected Pq{cc \ where a is the amplitude of 

the displaced states that Eve creates. In general, Eve may choose in such a way that P^^"'"* 
was almost similar to pj^'") (Eq. (6a)) due to the contribution P^P^ /4 (she may sometimes 
guess correct distribution P^*^"'^). But it happens at the expense of nonzero disguised 
probability P^ - P^Pi' /4 ^ thus giving Eve's presence away. The more Pi Eve chooses the 
more disguised probability P^ is observed. 

Eve may choose more tricky strategy of eavesdropping. Assume that Eve resends a 
corresponding disguised state either \<p'i)^^ or \<p'2)^2 ^^^^^ corresponding inconclusive 

output but she resends the following states 

1^1)12 = ;^|l'«'>j0'^'«')2-''|0,«')Jl,/a)j, (7a) 

I ^2 >i2 = (- ^1 1' ^'"i >i 1 0' «i )2 + 1 0, ) J 1, ), (7b) 

instead of {(Pi)^^ or 1^2)12' respectively, if she obtains a bit outcome. Such a strategy gives 
correct output distribution between Alice and Bob (6a)-(6c) since 

^i|'J'i>i2=|l>iO,^'V2«\ (8a) 



Bi\%\,= 0,i^f2a)\l), (8b) 
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saving for difference between Po{cc), Po{oCi), Pola ) and Po(^i)- Then, Eve may share 1 bit of 
information with Alice and Bob. Nevertheless, such method of eavesdropping has a weak 
place. The states and 1*^2)12 sensitive to influence of decoherence. It is impossible 

to keep the phase relation in the states |^i)j2' 1^2)12 stable when Eve and Bob are separated 

by large distance since quantum coherence is fragile under unavoidable interaction with 
environments. The decoherence effects for a state described by the density operator can be 
induced by solving the master equation when it is possible exactly calculate the coherence 
parameter and amplitude damping. Calculations of the parameters for the states (7a) and (7b) 
are beyond our consideration. Nevertheless, we may conjecture that Bob obtains a mixture of 
the states with density matrix 

=0.5(|l,a')^^(l,a])®|o,/a')^^(0,/a])+|o,a')^^(0,a])®|l,/ci;')^^(l,/a'|)) by analogy with 

coherent states with different amplitudes. Such a density matrix introduces error in output 
distribution P,^^"'^ = p(l - P^ (a' ))/8 , P,f"'^ = p(l - P^ (a[ ))/8 , and Pl^"'^ = 1 - P^^^"'^ - P.f"'^ on 

compared with Eqs. (6a)-(6c) that can be observed. It is possible to show that, when Eve 
eavesdrops on a fraction 7 < 1 of the fransmissions, then the final Alice-Bob distribution 

PoT^ = Pie"'^ = ^(1 - ^7/2X1 - ^o(«))/4 and P/f " = 1 - P,^^"'^ - P.f"^ , provided that 

Pq (a ) = )= /'^(ai) is performed, may approach ideal one given by Eqs. (6a)-(6c) at the 

expense of 1 bit less of mutual information ( I{A, E) = I{E, B) = r}). 

Let us consider another realistic sfrategy (beam splitting attack) where Eve tries to 
eavesdrop the transmitted signals without observing. Assume that Eve splits both states using 
her two beam splitters both described by the matrix 

I |2 I |2 

, where T and R satisfy the condition \T\ +\R\ = 1 . Then, the output states 
are the following 



Be = 



T 
-R* 



R 

r 
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u(\\,a\\0,ia)J = BiE,{\,a\\0)^)BiE,{o,ia\\0)J=T\ 1, aT\ \ 0, iaT)^ \ 0, aR)^^ \ 0, iaR)^^ 



+ i?| 0, aT)^ 1 0, iaT)^ \ 1, aR)^^ \ 0, iaR)^^ 

t/ j 0, «) J 0, J = 5,^ 1 0, a) J 0)^ )5i^4 0, J 0)^J= 1 0, «r) J 0, i «r)^ 

where and E2 are the Eve's modes. As « 1 , Eve may neglect contribution of second 

term in Eq. (9a) for her estimations. The same is applicable to the components of • The 
best that Eve can do in the case is to choose the parameters of her beam splitters such the 
condition |r| » to be performed. Then, the output Alice-Bob statistics 

p(^,) =p^Tf(\-P^(aT))lA, P^^'^ =P\Tf{\-PXaT))lA, P^""'^ ^\-P^^"'^ -P^^"'^ approaches 

sufficiently close to ideal (6a)-(6c), since |r| = 1 . Alice and Bob compare their statistics and 

take it as correct, after that Bob announces the corresponding number where he has got bit 

value. Eve also listens to their talk and she needs only to distinguish two states 

1 0, ck/?)^ 1 0, icc^^ and 1 0, ioCiR)^ \ 0, cci^^ from each other to have an access to the coding. It 

can be done as it does Bob with help of the balanced beam splitter (3) 

5i|o,crf?)^ |0,«crf?)^ )=|0)j Q,i42aR^^ and B\<d,ia,R) ^\Q,a,R) Q,i^[2a^R^ ^. 



Nevertheless, such strategy does not give Eve sufficient access to coding since a probability 

P^^^ = exp(- 2\af [1 - |r|^ ])» 1 not to register any photons and distinguish between 

1 0, ocR) ^ 1 0, iocR) ^ and 1 0, ia^R) ^\0,a,R)^ , respectively, is high. Eve registers nothing and 

she loses any information about coding shared by Alice and Bob. Thus, she may only has 
access to 7 = 1 - P^^^ « bits of mutual information. Moreover, Eve does not know exactly 

values of a to try to define optimal parameters for her beam splitting attack. This 
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consideration gives estimations for Alice's amplitude a to satisfy condition |G;|^[l-|r|^]=0 
for |r|' = 1 . 

Now, consider the case when Eve attempts to gain some information on each signal sent 
by Alice, while minimizing the damage to the state. This strategy can be realized by making 
the information carrier interact unitarily with a probe, and then letting it proceed to Bob, in 
slightly modified state. Eve may store her probe and decides which type of measurement to 
perform on her probe only after Alice and Bob shared their coding. To do it Eve supplies her 
probe in a known initial state I g) , and then the combined system may evolve as 



U^cp,)\g))=\cp,E)V,), lj\9^\g))=\(P,E)V2) , (10a) 

A A 

u\(Pi)\g))=\<PiE)V^), u\<P^)\g))=\P2E)V^), (10b) 

where l^i^^^ =|l«£>JO,/a£)2, \(p^^^^=\^,aj,)\^,iaE)^, |^2£)i2 =|l'^'«i£>i|0'«i£>2' ^^d 
^2E ) = 1 0, io^iE ), 1 0' (^ie)o ■ Evolution is unitary (Eve can to make some Hamiltonian which 

I '12 ^ 

generates it) and scalar product is conserved. Then, it imposes the following condition 

e^\e,) = exp(- i\af - |' )- {af - f | 1 (^Q^ Q^) ^ ^ ^ ^ 

1 

655) (- l\af - \a^f )- \af - \a,^f )) .'^ _^ , (lib) 

£3 1 ^2 ) = exp (- - I' )- - \a,E |' )) , (11c) 

{e, \e^) = exp(- \af - |' )- - l^i^ |' ))• (lid) 

The composite system is a direct product of the corresponding states if overlaps {e^ | e^^ < 1 ( 

7 = 1 - 4 ). After sending the modified carrier to Bob, Eve remains with her probe. The 
probes are not orthogonal to each other. The idea of Eve is to cause minimal damage to the 



1^1 ^4 
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information carrier and to obtain as much as possible information. To hide her presence Eve 
may try to guess Alice's parameters a = a^ and a = a^^ to provide performance of condition 
/J, («) « {cCj, ) ~ -Pq ) • But overlapping (^e^ | ) (Eq. (11a)) becomes almost unit ( 
(gj I ) ~ 1 ) for the case of a = ag and a = a^^ , respectively. Since the states | ) and | ) 

are not orthogonal and even more their overlapping is sufficiently large, Eve cannot 
distinguish them exactly and, as consequence, she may share only 1 bit less of mutual 
information. 

4. Discussion and conclusion 

Optical quantum cryptography is based on the use of single photon Fock states. 
Unfortunately, these states are difficult to realize experimentally. Nowadays, practical 
implementations rely on faint laser pulses, in which the photon number distribution obeys 
Poisson statistics or entangled photon pair. Both the possibilities suffer from a small 
probability of generating more than one photon or photon pair at the same time. For large 
losses in the quantum channel, small fractions of these multiphotons can have important 
consequences on the security of the key. We propose not to pursue goal of creating ideal 
resource of single photon states and make use of really existing resource of single photons. 
The way to create pseudo-single-photon states is the generation of photon pairs and the of use 
one photon as a trigger for the other one. The conditional photon generation by parametric 
down converter is connected with imperfections associated with experimental technique 
results [17]. Nevertheless, if we modulate such a statistical mixture by coherent state on a 
beam splitter we produce displaced photon states that are applicable for proposed QKD 
protocol. Even more, developed QKD protocol based on use of dual rail displaced states 
works with experimental attendant noise used to observe possible presence of malicious Eve. 
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By the way, such a modulation enables Alice to use two additional parameters inaccessible to 
nobody, namely, her initial distributions between displaced single photon and vacuum and 
amplitudes of her fields which she may change. Such QKD deals with optical pulses as 
carriers unlike quantum QKD with a single photon that approximates it to standard 
telecommunication communication. With the availability of source of quantum states for the 
communication, the success of quantum cryptography essentially depends on the ability to 
detect single photons. In principle, this can be achieved using a variety of techniques, for 
instance, photomultipliers, avalanche photodiodes, multichannel plates, and superconducting 
Josephson junctions. In our case, we need only to distinguish between a single photon and 
optical pulses involving multiphoton states that can be done by means of commercial 
detectors as it is shown in Fig. 1 and 2. 

Note another peculiarity of the proposed scheme. Consider optical fiber version of a Mach- 
Zehnder interferometer made out of two symmetric beam splitters connected to each other, 
with one phase modulator in each arm. This interferometer combined with a single-photon 
source and photon-counting detectors can be used for quantum cryptography provided that 
phase shift is kept constant. Although such a scheme may be perfect on an optical table, it is 
impossible to keep the path difference between two modes stable for a distance more. If we 
take states similar to 7(a) and 7(b) as carriers, then the same problems appear as the states 7(a) 
and 7(b) are the displaced analogues of a singe photon in superposition state that takes 
simultaneously two modes. Nevertheless, although we call used states as dual rail displaced 
photon number states, it is evident that Alice can do some delay between the pulses in 
different modes and send them through the same optical fiber one after the other where they 
may experience the same phase shift in environmentally sensitive part of the system. This 
enables to conserve phase relations of incoming pulses on output at Bob side if he also makes 
the same delay for first pulse before to combine two pulses on the beam splitter. Detailed 
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analysis of influence of decoherence on phase relations is subject of future investigation and 
is beyond the consideration. Let us only mention that use of pulses with large amplitudes 
unlike conventional schemes of the quantum cryptography may show resistance to 
eavesdropping even in settings with high attenuation. It is also useful to note that optical 
scheme of two-state protocol [5] can be implemented using interference between a 
macroscopic bright pulse and a dim pulse with less than one photon on average [5]. Proposed 
optical scheme is not one of Mach-Zehnder interferometer and, as consequence, it is fi-ee of 
interference effect and of attendant problems. Remarkably, that this approach is robust against 
loss of the single photon, and inefficiency of the photodetectors. Those factors will cause the 
corresponding photodetectors to be silent, and such cases can simply be discarded. Therefore, 
this only affects the output distributions and has to be taken into account in real case. 

In conclusion, we proposed a new QKD protocol that is based on use of nonclassical 
properties of the displaced single photon states. Given protocol works as a binary erasure 
channel also as in a B-92 protocol [5]. This is sole possible resemblance with a B-92 protocol 
but not more. Our analysis involves study of only restricted number of possible eavesdropping 
attacks and show that the protocol is secure under them. 
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List of figures 
Figure 1 

Schematic representation of QKD based on dual-rail displaced states. Alice prepares her dual- 
rail displaced state and sends it to Bob who has a chance extract bit value if it was the bit state. 
Otherwise Bob obtains inconclusive outcome and discards it. Bob announces a number where 
he successfully got bit value only if a procedure of check of eavesdropping showed absence 
of it. 

Figure 2(a,b) 

Example how to distinguish between a coherent state 0, V2«^ and a single photon |l^ . The 

coherent state mainly results in registration of photons by two detectors save for small failure 
probability to register only one click. Single photon gives always one click. The more 
amplitude of the displaced state we use the less the failure probability. 
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